CVE-2023-22852

Tiki through 25.0 allows CSRF attacks that are related to tiki-importer.php and tiki-importsheet.php...

PT-2023-18728 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 25.0 Description: The issue allows for CSRF attacks related to tiki-importer.php and tiki-import sheet.php. Recommendations: For versions prior to 25.0, update to version 25.0 or later to resolve the issue...

PT-2023-18727 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 24.2 Description: The issue allows PHP Object Injection in lib/importer/tikiimporter blog wordpress.php by an admin due to an unserialize call. Recommendations: For versions prior to 24.2, update to version 24.2 or late...